Privacy Policy

In this privacy policy:

• applicable privacy laws mean the requirements of privacy laws, codes and regulations

relevant to you in the country you reside in, including as applicable the Australian Privacy Act 1988;

• personal data means identifiable data about you, for example your name, email, address,

telephone number and so on. If you cannot be identified (for example, when personal data

has been aggregated and anonymized to the extent you can’t reasonably be identified) then

certain parts of this privacy policy may not apply to that information. This includes “personal

information” as it is defined under applicable privacy laws;

• where we refer to processing of your personal data, we mean all activities relating to our use of that personal data, from its collection through to its storage and disposal and everything in between, and process shall be interpreted accordingly;

• a reference to Urban Brands

• a reference to our Website is to our website at www.urbanbrands.com.au and any other website(s) and/or B2B e-commerce platform(s) owned, operated and/or managed by Urban Brands and to any services that are or may be available on any of them; and

• a reference to you, your is to any user of the Website.

The types of personal data we may collect about you

The types of your personal data we may collect include:

• identity data (including first / middle / last name, job title and/or business organization);

• contact data (including billing / delivery address, email address and telephone numbers);

• financial data (including bank account and payment card details, which may be collected

through our third-party payment processor Stripe, Inc. or directly from you and used with third party payments processors such as, Stripe);

• transaction data (including details about payments from you to us and other details of goods you have purchased from us);

• technical and usage data (including IP address, login data, browser session data, device and network information, statistics on page views and sessions, acquisition sources, search queries and/or browsing behavior, information about access and use of or communications with our Website, including through the use of cookies, the type of browser being used to access the Website, the type of operating system being using and the ISP domain name);

• profile data (including your log in for the Website, support requests you have made, your interests, preferences, feedback and survey responses, additional personal data that you provide to us, directly or indirectly, through your use of the Website, associated applications or accounts from which you permit us to collect information);

• marketing and communications data (including communication preferences, preferences in receiving marketing material from us and/or our third-party partners); and

• requested data (including any other personal data requested by us and/or provided by you or a third party).

When and how we might collect your personal data

The ways we collect your personal data can be categorized into:

(1) information you provide us directly,

(2) information that is collected automatically and

(3) information we indirectly collect from third parties.

Information you provide to us directly

The personal data we collect directly from you may include the below:

• information contained in or relating to any communication that you send to us or that we send to you (communication data). The communication data may include the communication content and metadata associated with the communication;

• data allowing us to get in touch with you (contact data). This contact data may include your

name, email address, telephone number, postal / delivery address and other information you provide us when you send us communication data;

• information relating to transactions, including purchases of goods from the Website

(transaction data). The transaction data may include payment card details or other payment

and transaction details; or

• Website user account data (account data). This account data may include your name, email address, account creation, business organization, Website settings and marketing

preferences.

Information that is collected automatically

Our Website uses cookies, which means we automatically collect certain personal data when you use the Website. A cookie is a file created by our Website host server (and stored on your web browser) when you browse the Website which stores information about you and your behavior on the Website.

We may use cookies to:

• help us analyze the use and performance of our Website;

• identify you as you navigate our Website (for example, to record goods you wish to purchase in your shopping cart and the location from which you are accessing the Website);

• collect information about the device you use to access the Website; and

• protect our user accounts and the Website generally.

Most internet browsers give you the option to reject all cookies, accept all cookies, erase cookies stored on your device or be notified before a cookie is stored on your device. However, if you reject or erase the cookies referred to above, some functionality or features of this Website may not function properly or be fully available. Please refer to your internet browser instructions if you want to find out more about rejecting or blocking cookies.

Information collected indirectly from third parties

We may indirectly collect personal data about you from third parties with your authorization or where otherwise permitted by law (for example, where the source of the information is publicly available). Where you provide us with any personal data about somebody else (such as your customers), you must have that person’s authorization to do so. By providing us with anybody else’s personal data, you represent and warrant that you have such person’s permission to provide the personal data to us and for us to process that personal data in accordance with this privacy policy.

How we may use your personal data and the reasons we collect it

We will primarily use your personal data to provide you with any goods and/or services you have ordered or requested from the Website and to support our relationship with you. We will use this personal data generally to manage our services and business effectively, as well as for potential development of future products and services.

We may use your personal data for the following purposes:

• communications – to monitor, respond to and/or keep records of our electronic communications and other correspondence with you;

• transactions – to provide our goods or services, provide you with information in respect of our goods or services, generate invoices and other payment-related documentation;

• operations – to operate, improve and enhance the Website. We may analyze the use of our Website or services to ensure our Website and services are provided in the most effective manner for you;

• marketing – if you opt-in to receive information about our promotional offers and/or newsletters from us, we may use your personal data to contact you by email and/or post with the information you have opted-in to receive;

• customer support – to support your use of our goods and/or services, this may include

assisting with the resolution of product issues or other issues relating to the Website, whether by email or otherwise;

• record keeping and reporting – to create and maintain our databases, back-up copies of our databases and business records generally. We may also use your personal data to produce aggregated and anonymized analytics and reports, which we may share publicly or with third parties;

• security – to detect and/or prevent any illegal activity that may threaten us, or any of our services.

• risk management – where necessary for the establishment, exercise or defense of legal

claims. We may also use your personal data where necessary for the purposes of obtaining

or maintaining insurance, managing risks and/or obtaining professional advice; and

• compliance – to comply with any applicable laws and/or regulations or to

protect your vital interests or the vital interests of another natural person.

Other circumstances where we may share your personal data

We will only share personal data when we are allowed to under applicable data protection laws, or when we are legally required to. We may disclose your personal data to:

• third party service providers for the purpose of enabling them to provide their services to us and therefore to you, including IT service providers, content management system providers, data storage, webhosting and server providers, debt collectors, maintenance or problem-solving providers, marketing or advertising providers, professional advisors and payment systems operators.

• internally with Urban Brands, including to our employees and contractors.

• our existing or potential agents or business partners.

• anyone to whom our business or assets (or any part of them) are, or may (in good faith) be, transferred.

• courts, tribunals, regulatory authorities and law enforcement officers, as required or

authorized by law, in connection with any actual or prospective legal proceedings (for

example, in the event you fail to pay for goods or services we have provided to you) or in

order to establish, exercise or defend our legal rights; and

• any other third parties as required or permitted by law.

How we will store your personal data

We will not keep personal data for longer than is reasonably necessary to fulfil the purposes outlined in this privacy policy. We are committed to keeping personal data as safe and secure as possible and we follow generally accepted industry standards to protect the personal data submitted to us. Wherever your personal data is stored, we take reasonable steps to ensure that it is protected, including for example access to the personal data we store is limited to those Urban Brands staff members who have a legitimate business requirement to use it. While we continuously implement and update our administrative, technical, and physical security measures to help protect your personal data against unauthorized access, loss, destruction, or alteration, we cannot guarantee the security of the transmission or storage of your personal data.

The circumstances in which we may disclose your personal data overseas

Sometimes, the third parties to whom we disclose your personal data may be in countries other than the country you live. We will only make an overseas disclosure in accordance with the requirements for overseas transfers of personal data as set out in the applicable privacy law. The most common reason is because the third-party recipient exists overseas and is contracted to support our technology and operational aspects.

You may request more information about how we handle overseas transfers of your personal data in accordance with applicable privacy law by contacting our privacy representative using the details further below.

Your rights in relation to your personal data

You have certain rights in connection with your personal data, which may include the right to know what personal data we hold about you and the right to request access to, and correction of, your personal data. These rights are subject to certain limitations and exceptions as set out in the applicable privacy laws. If you wish to exercise any of the rights described above, please contact our privacy officer using the details below.

If you have any concerns or wish to make a complaint about our use of your personal data, please contact our privacy officer using the details below and provide us with full details of the complaint. We will promptly investigate your complaint and respond to you, in writing, setting out the outcome of our investigation and the steps we will take in response to your complaint. If you are not satisfied with our resolution process you may also have the right to make a complaint to the relevant personal data protection authority.

Links to other websites

Our services may contain links to other websites. We do not have any control over those websites, and we are not responsible for the protection and privacy of any personal data which you provide whilst visiting those websites. Those websites are not governed by this privacy policy.

Changes to this privacy policy

We may need to update this privacy policy from time to time, including when necessary to reflect changes to this Website, updates to our services or to reflect any change in law.

Contact details

For any questions or notices, please contact our privacy department at:

Urban Brands

Attn: Privacy Department

Address: 3/2 Carrington Drive. Albion VIC 3020

Email: info@urbanbrands.com.au